3639 matches found
Anviz CrossChex Buffer Overflow
Waits for broadcasts from Ainz CrossChex looking for new devices, and returns a custom broadcast, triggering a stack buffer overflow. Module Options msf use exploit/windows/misc/crosschex/devicebof msf undefineddevicebof show actions ...actions... msf undefineddevicebof set ACTION msf...
EulerOS 2.0 SP8 : kernel (EulerOS-SA-2019-2283)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A memory leak in the af9005identifystate function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to...
Linux kernel memory corruption vulnerability (CNVD-2019-42788)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the ax25create function in the net/ax25/afax25.c file in the AFAX25 network module in Linux kernel 5.3.2 and earlier. An attacker ca...
HeaderMap::Drain API is unsound
Affected versions of this crate incorrectly used raw pointer, which introduced unsoundness in its public safe API. Failing to drop the Drain struct causes double-free, and it is possible to violate Rust's alias rule and cause data race with Drain's Iterator implementation. The flaw was corrected ...
RUSTSEC-2019-0034 HeaderMap::Drain API is unsound
Affected versions of this crate incorrectly used raw pointer, which introduced unsoundness in its public safe API. Failing to drop the Drain struct causes double-free, and it is possible to violate Rust's alias rule and cause data race with Drain's Iterator implementation. The flaw was corrected ...
PT-2019-16426
Name of the Vulnerable Software and Affected Versions http crate versions prior to 0.1.20 Description An issue was discovered in the http crate for Rust, where the HeaderMap::Drain API can use a raw pointer, defeating soundness. This introduced unsoundness in its public safe API, potentially...
SUSE-SU-2019:14218-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 11-SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks...
USN-4185-2 linux-azure vulnerabilities
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions TSX could expose...
PunBB 1.4.4 Database Disclosure
From https://j.ludost.net/blog/archives/2019/11/11/minorsecurityissueinpunbbwithsqlite/index.html Minor security issue in punbb with SQLite Georgi Guninski security advisory 76, 2019 Running punbb-master from https://github.com/punbb/punbb from Thu 07 Nov 2019 11:23:33 AM UTC Installing on...
CVE-2017-7542
An integer overflow vulnerability in ip6find1stfragopt function was found. A local attacker that has privileges of CAPNETRAW to open raw socket can cause an infinite loop inside the ip6find1stfragopt function...
openSUSE Security Update : the Linux Kernel (openSUSE-2019-2444)
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-16995: A memory leak exits in hsrdevfinalize in net/hsr/hsrdevice.c. if hsraddport fails to add a port, which may cause denial of service, aka CID-6caabe7f197d...
OPENSUSE-SU-2019:2444-1 Security update for the Linux Kernel
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-16995: A memory leak exits in hsrdevfinalize in net/hsr/hsrdevice.c. if hsraddport fails to add a port, which may cause denial of service, aka CID-6caabe7f197d...
kernel: MIDI driver race condition leads to a double-free
It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc double free in sndrawmidiinputparams and sndrawmidioutputstatus which are part of sndrawmidiioctl handler in rawmidi.c file. A malicious local attacker could possibly use this f...
Unspecified vulnerability in Linux kernel (CNVD-2019-38534)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the ieee802154create function in the net/ieee802154/socket.c file in the AFIEEE802154 network module in Linux kernel 5.3.2 and...
Unspecified vulnerability in Linux kernel (CNVD-2019-38532)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the llcpsockcreate function in the net/nfc/llcpsock.c file in the AFNFC network module in Linux kernel 5.3.2 and earlier. An attacke...
Unspecified vulnerability in Linux kernel (CNVD-2019-38533)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the atalkcreate function in the net/appletalk/ddp.c file in the AFAPPLETALK network module in Linux kernel 5.3.2 and earlier. An...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2019:2392-1 Rating: important References: 1046299 1046303 1046305 1050244 1050536 1050545 1051510 1055186 1061840 1064802 1065600 1066129 1073513 1086323 1087092 1089644 1093205 1097583 1097584 1097585...
Cross-Site Scripting (XSS)
node-red-dashboard is vulnerable to cross-site scripting XSS. The vulnerability exists as the uinotification node accepts raw HTML code by default...
Cisco IOS XE Software Raw Socket Transport Denial of Service Vulnerability
According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. The vulnerability in the Raw Socket Transport feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service...
